Privacy Notice

Mukova is a payment orchestration platform. This notice covers the personal data we process about merchants who use Mukova, the people who own or run those businesses (directors and beneficial owners, as part of onboarding), and — to a limited extent — the customers of those merchants, whose transaction references pass through our systems.

What we collect.Business and director identity details submitted during onboarding, supporting documents (such as identification), beneficial ownership information, screening results, transaction records, and account activity. Merchant customers are represented in our systems only by whatever reference their merchant chooses to send us — we don't independently collect data directly from a merchant's customers.

Why.Onboarding and identity data is processed because we're legally required to know who we're doing business with before enabling payment services — this isn't optional and isn't based on consent. Account and transaction data is processed to provide the service a merchant has signed up for.

Retention.Compliance-related records (identity documents, screening results) are generally retained for longer than an active account relationship, consistent with anti-money-laundering recordkeeping expectations. We're in the process of formalizing exact retention periods per data category — if you need specifics for your situation, ask via the form below.

Your rights.You can ask to see what we hold about you, ask us to correct it, or ask us to delete it. Deletion requests involving compliance records may be limited where we're legally required to keep them — we'll tell you plainly if that applies rather than silently ignoring the request.

Where your data is processed. Our infrastructure runs on Supabase and Vercel; the underlying hosting region may sit outside Zimbabwe. A formal cross-border transfer assessment is in progress.